Privacy policy

The short version

We collect what you type into a form on this site, plus which page you arrived on. We use it to reply to you and to do the work you asked for. We do not sell it, we do not share it for advertising, and we do not add you to a marketing list because you asked us a question. You can ask us for a copy or ask us to delete it at any time by emailing hello@estoremanager.io, and we will action it within thirty days.

What we collect, and when

When you submit a form.The contact form and the free store check form collect your email address, which is required, and whichever of these you choose to give us: your name, your business name, your store's web address, a phone number, a subject line, and your message or answers. Nothing beyond the email address is mandatory.

Alongside a submission.We record the page you first landed on, the site that referred you, any campaign tags in the link you followed, your browser's user-agent string, and the country your request came from. This exists so we can tell which pages produce enquiries. It is stored with your submission rather than separately.

If you become a client.Access to your Shopify admin is granted by you through Shopify's own staff or collaborator system, not by sharing credentials. We do not copy your customer list out of your store, and we do not process your customers' personal information except as needed to do a specific task you have asked for, inside your own systems.

What we do not collect. We do not ask for payment card details on this site. We do not use tracking pixels from advertising networks. If you only read the site and never submit anything, we do not try to work out who you are.

Why we collect it

To reply to you, to carry out the free store check if you asked for one, to provide services you engage us for, and to keep basic records of enquiries so we know what is working. That is the complete list. If we ever want to use it for something else, we will ask you first.

Who else holds it

We do not run our own servers, so three companies necessarily receive what you send:

• Sanity stores the submission as a record we can retrieve later. This is where your enquiry actually lives.
• Resend delivers the notification email that tells us your enquiry arrived, which contains what you submitted.
• Vercel hosts this site and runs the code that receives your form, so the submission passes through their infrastructure on its way to the other two.

Separately, if you book a call, that is handled by Cal.com, and anything you type into their form is held by them under their own policy rather than this one.

Your information is processed outside Canada, including in the United States, because those providers operate there. That means it can be subject to lawful access requests under the laws of those countries. We are telling you this rather than burying it because you cannot meaningfully consent to something you have not been told.

We do not sell your information, we do not rent it, and we do not disclose it to anyone else except where the law requires it.

Email, and what we will not send you

If you ask us a question, we answer that question. Asking us something does not subscribe you to anything. We do not currently send a newsletter or marketing campaigns. If that changes, it will be something you opt into deliberately, every message will identify us and carry a working unsubscribe link, and unsubscribing will be honoured immediately.

How long we keep it

Enquiries are kept only as long as they serve the purpose you sent them for — answering you, and recognising you if you come back — and are deleted once that purpose has passed. Records relating to actual client work are kept for as long as we work together and then for the period our tax and accounting obligations require.

You do not have to wait for either of those. Ask us to delete your information and we will, unless we are legally required to keep a specific record, in which case we will tell you which one and why.

Your rights

You can ask us to:

• tell you what we hold about you
• send you a copy of it
• correct anything that is wrong
• delete it
• stop using it for a particular purpose
• explain any decision we made using it

Email hello@estoremanager.io and a person will reply. We answer requests within thirty days, which is the deadline the law sets, and we will tell you promptly if a specific request will take longer and why. There is no charge.

If we handle a request badly, you can complain to the Office of the Privacy Commissioner of Canada, and residents of Quebec can complain to the Commission d'accès à l'information. We would rather you told us first, but you are not obliged to.

Security

Submissions travel to us over an encrypted connection, and the accounts they are stored in are restricted to the small number of people who need to read an enquiry in order to answer it.

No one can honestly promise that a breach is impossible, and we are not going to. What we will commit to is that if information you gave us is exposed in a way that could cause you harm, we will tell you and the relevant regulator promptly rather than quietly.

Cookies and analytics

This site does not use advertising or cross-site tracking cookies. Two things are stored in your own browser rather than sent to us:

• The page you first arrived on, in session storage, so it can be attached to a form submission if you make one. That is cleared when you close the tab.
• If you tick items on the store health checklist, your progress, in local storage, so the page remembers it when you come back. That stays until you clear your browser data, and it never reaches us — the checklist has no account and submits nothing.

Where analytics are enabled, they are used only in aggregate to see which pages get read, and the provider — Plausible, Google Analytics or Umami, depending on which is configured — also sees that a visit happened. If that provider is Google Analytics, it sets a cookie of its own in your browser to tell one visit apart from the next; the other two are cookieless. If we ever add anything that follows you onto other websites, this page will say so before it goes live.

Children

This is a service sold to businesses. We do not knowingly collect information from anyone under sixteen. If you believe we have, email us and we will delete it.

Changes

If this policy changes materially, the date at the top changes and we will note what changed. We will not quietly broaden what we do with information already given to us under an older version.

Contact

For anything on this page, including access and deletion requests, email hello@estoremanager.io. If you would rather write to us, ask and we will give you a postal address.